TehoTrust Centre

Teho Trust Centre

How Teho protects work data. AWS infrastructure, privacy boundaries and the evidence behind our safeguards.

Controls

View all

Infrastructure Security

  • AWS data services in Ireland — Deployment evidence
  • Regional service restrictions — Deployment evidence
  • Private, encrypted contribution storage — Configuration reviewed
View evidence and scope

Product Security

  • Separate release environments — Deployment evidence
  • Authenticated contribution intake — Configuration reviewed
View evidence and scope

Data and Privacy

  • Deployment-specific privacy boundaries — Confirmation pending
  • Retention and deletion — Confirmation pending
  • Supplier and processing schedule — Confirmation pending
View evidence and scope

Operational Assurance

  • Backup and recovery evidence — Confirmation pending
  • Access reviews and incident readiness — Confirmation pending
  • Certification status — Confirmation pending
View evidence and scope

Subprocessors

Amazon Web Services • Core cloud infrastructureConfirmed infrastructure provider

Core data services in Ireland. Global delivery and supporting services are described separately in the data-flow review.

Ireland · eu-west-1

This is not the complete subprocessor schedule. Remaining suppliers, AI processing paths and service regions require deployment-specific confirmation.

FAQ

Where does Teho process data?

Core cloud data services run on AWS in Ireland (eu-west-1). Global delivery and supporting services have separate roles. Ask for the data-flow and supplier schedule for your deployment.

Is everything hosted on AWS?

AWS provides the core cloud data services. This is not a claim that every website, business tool or supporting supplier runs on AWS. The complete processing schedule is being reconciled.

What does the control status mean?

Deployment evidence means a deployment or operating-check record was reviewed. Configuration reviewed means the implementation settings were inspected. Confirmation pending means further evidence is needed. None of these labels is a certification or a fresh independent audit.

How long is data retained?

Cloud contributions and device-local data have separate lifecycles. The reviewed cloud contribution store has no automatic expiry. Contact us to confirm the applicable retention policy and deletion arrangements for your deployment.

Which AI providers are used?

Hosting on AWS does not, by itself, identify an AI provider. The model, processing location and data supplied to it need to be confirmed for the deployed processing path.

How is employee privacy handled?

Teho is designed to support team-level work improvement, not individual productivity ranking. Capture, exclusions, reporting thresholds and access boundaries need to be understood together. The privacy overview sets out what to review for a deployment.

Updates

AWS architecture and control evidence reviewed; outstanding confirmations identified13 Sep 2026
Trust Centre separated from product-specific Baseline privacy content3 Jun 2026
Security & Data Residency summary publishedMay 2026
DPA summary and subprocessor posture publishedMay 2026

Need the full review pack?

Email info@teho.ai with your company, reviewer audience, and review scope. Teho will route you to the right questionnaire, security pack, subprocessor schedule, or data-flow material.